[ProFTPD-committers] [Bug 3575] Process privileges not handled properly when --enable-autoshadow is used

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575


TJ Saunders <***@castaglia.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
CC| |***@castaglia.org
Summary|Cannot write logs/wtmp due |Process privileges not
|to improper process |handled properly when
|permissions |--enable-autoshadow is used

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575


TJ Saunders <***@castaglia.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Keywords| |Backport
CC| |***@debian.org,
| |***@city-fan.org

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575





--- Comment #1 from TJ Saunders <***@castaglia.org> 2011-01-12 21:30:48 ---
Created an attachment (id=3511)
--> (http://bugs.proftpd.org/attachment.cgi?id=3511)
Fixes bug (hopefully)

Could you try this patch (generated against the current CVS sources, but should
apply without issue to the 1.3.3d sources), and verify that it corrects the
issue?

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575


TJ Saunders <***@castaglia.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Summary|Process privileges not |Process privileges may not
|handled properly when |handled properly when
|--enable-autoshadow is used |--enable-autoshadow is used

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575





--- Comment #2 from Greg <***@gmail.com> 2011-01-13 10:20:57 ---
Looks like the patch did the trick. I patched against 1.3.3d source so I could
build a fake slackware 1.3.3e package to deploy to my box. The end result was
that it fixed the following messages in the debug log:

wtmp /var/log/wtmp: Permission denied
opening TransferLog '/var/log/xferlog'
unable to open TransferLog '/var/log/xferlog': Permission denied
error: unable to set groups: Operation not permitted


I had forgotten about the last error there. That was my original reason for
looking into the issue as that shows up in the log without debugging turned on.
The others required some debugging level to be set to see them.

Now I see the proper ROOT/RELIQUISH in the log and trace, so I think we're good
to go. Close this ticket at your convenience.

Thanks for the quick turnaround on this!

- Greg Neujahr

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575


TJ Saunders <***@castaglia.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution| |FIXED




--- Comment #3 from TJ Saunders <***@castaglia.org> 2011-01-13 13:13:40 ---
Patch committed to CVS, and backported to the 1.3.3 branch. Thanks!

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575


TJ Saunders <***@castaglia.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |VERIFIED

[b***@horde.net]

http://bugs.proftpd.org/show_bug.cgi?id=3575

TJ Saunders <***@castaglia.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|VERIFIED |CLOSED

--- Comment #4 from TJ Saunders <***@castaglia.org> 2011-04-06 04:11:22 EDT ---
Resolved in 1.3.4rc2.